Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-213

IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements

Date Published: November 2021


Michael Fagan (NIST), Jeffrey Marron (NIST), Kevin Brady (NIST), Barbara Cuthill (NIST), Katerina Megas (NIST), Rebecca Herold (The Privacy Professor Consultancy), David Lemire (Huntington Ingalls Industries), Brad Hoehn (Huntington Ingalls Industries)



cybersecurity baseline; Internet of Things (IoT); securable computing devices; security requirements; Risk Management Framework; Cybersecurity Framework
Control Families

None selected


Download URL

Supplemental Material:
Blog post

Publication Parts:
SP 800-213A

Related NIST Publications:
IR 8259
IR 8259A
IR 8259B
IR 8379

Document History:
12/15/20: SP 800-213 (Draft)
11/29/21: SP 800-213 (Final)